sms-magic

Fail

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @membranehq/cli package from npm. This is a verified utility provided by the skill author (Membrane) to handle secure authentication and service communication.
  • [COMMAND_EXECUTION]: The skill provides instructions for using the membrane command-line tool to perform actions such as searching for connectors, establishing connections, and executing API calls. These operations are scoped to the intended functionality of the integration.
  • [SAFE]: Automated scanner flags for the SMS Magic developer hub URL appear to be false positives. The URL https://www.smsmagic.com/developer-hub/ is the official resource for the service's API documentation and is relevant to the skill's purpose.
Recommendations
  • CRITICAL: 1 infected file(s) detected - DO NOT USE
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Apr 21, 2026, 06:40 PM